CVE-2020-8171
Summary
| CVE | CVE-2020-8171 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-05-26 16:15:00 UTC |
| Updated | 2020-05-28 20:00:00 UTC |
| Description | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Ui | Ag-hp-2g16 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g16 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g20 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g20 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g23 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g23 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g27 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g27 | - | All | All | All |
| Hardware | Ui | Airgrid M | - | All | All | All |
| Hardware | Ui | Airgrid M | - | All | All | All |
| Hardware | Ui | Airgrid M2 | - | All | All | All |
| Hardware | Ui | Airgrid M2 | - | All | All | All |
| Hardware | Ui | Airgrid M5 | - | All | All | All |
| Hardware | Ui | Airgrid M5 | - | All | All | All |
| Operating System | Ui | Airos | All | All | All | All |
| Hardware | Ui | Ar | - | All | All | All |
| Hardware | Ui | Ar | - | All | All | All |
| Hardware | Ui | Ar-hp | - | All | All | All |
| Hardware | Ui | Ar-hp | - | All | All | All |
| Hardware | Ui | Bm2-ti | - | All | All | All |
| Hardware | Ui | Bm2-ti | - | All | All | All |
| Hardware | Ui | Bm2hp | - | All | All | All |
| Hardware | Ui | Bm2hp | - | All | All | All |
| Hardware | Ui | Bm5-ti | - | All | All | All |
| Hardware | Ui | Bm5-ti | - | All | All | All |
| Hardware | Ui | Bm5hp | - | All | All | All |
| Hardware | Ui | Bm5hp | - | All | All | All |
| Hardware | Ui | Is-m5 | - | All | All | All |
| Hardware | Ui | Is-m5 | - | All | All | All |
| Hardware | Ui | Lbem5-23 | - | All | All | All |
| Hardware | Ui | Lbem5-23 | - | All | All | All |
| Hardware | Ui | Litestation M5 | - | All | All | All |
| Hardware | Ui | Litestation M5 | - | All | All | All |
| Hardware | Ui | Locom2 | - | All | All | All |
| Hardware | Ui | Locom2 | - | All | All | All |
| Hardware | Ui | Locom5 | - | All | All | All |
| Hardware | Ui | Locom5 | - | All | All | All |
| Hardware | Ui | Locom9 | - | All | All | All |
| Hardware | Ui | Locom9 | - | All | All | All |
| Hardware | Ui | M2 | - | All | All | All |
| Hardware | Ui | M2 | - | All | All | All |
| Hardware | Ui | M3 | - | All | All | All |
| Hardware | Ui | M3 | - | All | All | All |
| Hardware | Ui | M365 | - | All | All | All |
| Hardware | Ui | M365 | - | All | All | All |
| Hardware | Ui | M5 | - | All | All | All |
| Hardware | Ui | M5 | - | All | All | All |
| Hardware | Ui | M900 | - | All | All | All |
| Hardware | Ui | M900 | - | All | All | All |
| Hardware | Ui | Nb-2g18 | - | All | All | All |
| Hardware | Ui | Nb-2g18 | - | All | All | All |
| Hardware | Ui | Nb-5g22 | - | All | All | All |
| Hardware | Ui | Nb-5g22 | - | All | All | All |
| Hardware | Ui | Nb-5g25 | - | All | All | All |
| Hardware | Ui | Nb-5g25 | - | All | All | All |
| Hardware | Ui | Nbe-m2-13 | - | All | All | All |
| Hardware | Ui | Nbe-m2-13 | - | All | All | All |
| Hardware | Ui | Nbe-m5-16 | - | All | All | All |
| Hardware | Ui | Nbe-m5-16 | - | All | All | All |
| Hardware | Ui | Nbe-m5-19 | - | All | All | All |
| Hardware | Ui | Nbe-m5-19 | - | All | All | All |
| Hardware | Ui | Nbm3 | - | All | All | All |
| Hardware | Ui | Nbm3 | - | All | All | All |
| Hardware | Ui | Nbm365 | - | All | All | All |
| Hardware | Ui | Nbm365 | - | All | All | All |
| Hardware | Ui | Nbm9 | - | All | All | All |
| Hardware | Ui | Nbm9 | - | All | All | All |
| Hardware | Ui | Nsm2 | - | All | All | All |
| Hardware | Ui | Nsm2 | - | All | All | All |
| Hardware | Ui | Nsm3 | - | All | All | All |
| Hardware | Ui | Nsm3 | - | All | All | All |
| Hardware | Ui | Nsm365 | - | All | All | All |
| Hardware | Ui | Nsm365 | - | All | All | All |
| Hardware | Ui | Nsm5 | - | All | All | All |
| Hardware | Ui | Nsm5 | - | All | All | All |
| Hardware | Ui | Pbe-m2-400 | - | All | All | All |
| Hardware | Ui | Pbe-m2-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-300-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-400-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-400-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-620 | - | All | All | All |
| Hardware | Ui | Pbe-m5-620 | - | All | All | All |
| Hardware | Ui | Pbm10 | - | All | All | All |
| Hardware | Ui | Pbm10 | - | All | All | All |
| Hardware | Ui | Pbm365 | - | All | All | All |
| Hardware | Ui | Pbm365 | - | All | All | All |
| Hardware | Ui | Pbm5 | - | All | All | All |
| Hardware | Ui | Pbm5 | - | All | All | All |
| Hardware | Ui | Picom2hp | - | All | All | All |
| Hardware | Ui | Picom2hp | - | All | All | All |
| Hardware | Ui | Power Ap N | - | All | All | All |
| Hardware | Ui | Power Ap N | - | All | All | All |
| Hardware | Ui | Rm2-ti | - | All | All | All |
| Hardware | Ui | Rm2-ti | - | All | All | All |
| Hardware | Ui | Rm5-ti | - | All | All | All |
| Hardware | Ui | Rm5-ti | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security advisory bulletin 011 | Ubiquiti Community | MISC | community.ui.com | Vendor Advisory |
| Ubiquiti - Downloads | MISC | www.ui.com | Release Notes |
| v6.3.0 | Ubiquiti Community | MISC | community.ui.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.